LOWER BOUNDS ON THE LENGTHS 
OF DOUBLE-BASE REPRESENTATIONS 
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Abstract. A double-base representation of an integer n is an expression 
n = ni + ■ ■ ■ + n r , where the Hi are (positive or negative) integers that are 
divisible by no primes other than 2 or 3; the length of the representation is the 
number r of terms. It is known that there is a constant a > such that every 
integer n has a double-base representation of length at most alogn/ log log n. 
We show that there is a constant c > such that there are infinitely many 
integers n whose shortest double-base representations have length greater than 
c log n I (log log n log log log n) . 

Our methods allow us to find the smallest positive integers with no double- 
base representations of several lengths. In particular, we show that 103 is 
the smallest positive integer with no double-base representation of length 2, 
that 4985 is the smallest positive integer with no double-base representation 
of length 3, that 641687 is the smallest positive integer with no double-base 
representation of length 4, and that 326552783 is the smallest positive integer 
with no double-base representation of length 5. 



1. Introduction 

A {2, 3}-integer is a positive or negative integer with no prime divisors other than 
2 or 3. A length-r double-base representation of an integer n is an expression n — 
n\ + ■ ■ ■ + n r , where each summand is a {2, 3}-integer. Double-base representations 
were introduced by Imbert, Mishra, and the first author 7, 8 to help speed the 
calculation of large multiples of points on elliptic curves. (An earlier version of the 
double-base number system, using only positive summands, was used by Jullien, 
Miller, and the first author [6] for modular exponentiation.) In this paper we will 
be concerned not with the practical applications of double-base representations 
p3ll4ll9| IT2rtl4] , but rather with number-theoretic questions arising from their study. 

The span s(n) of an integer n is the smallest r such that n has a double-base 
representation of length r. Note that if an integer has a double-base representation 
of length r > 0, then it also has a double-base representation of length r + 1; to see 
this, simply replace a summand n, in a length-r representation with the expression 
'irii — 2n.j. Thus, a positive integer has double-base representations of every length 
greater than or equal to its span. 

It is already known [SI Thm. 4; [71 Thm. 2] that s(n) — 0(logn/loglogn). Our 
first result gives a lower bound for the growth of s(n). 

Theorem 1.1. There is a constant c > such that for infinitely many values of n 
we have 

s(n) > clogn 

log log n log log log n ' 
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For each i > 0, let S(i) denote the smallest positive integer with span i. Clearly 
5(1) = 1 and 5(2) = 5. The fact that 5(3) = 103, which can be proven through the 
use of a result of Ellison [TU], is stated in [7J. Furthermore, it is conjectured in [7J 
that 5(4) = 4985. Methods related to those we use in the proof of Theorem 11.11 
allow us to compute the values of S(i) for i < 6. 

Theorem 1.2. We have 

5(3) = 103, 
5(4) = 4985, 
5(5) = 641687, 
5(6) = 326552783. 

The proofs of both theorems rely on finding integers m such that the reduction 
modulo m of the set of {2, 3}-integers is a very small subset of Z/mZ. We make this 
notion precise and prove Theorem 11.11 in Section [5J In Section [3] we introduce the 
idea of a doubly-primitive double-base representation and we show that the prob- 
lem of determining whether an integer has a length-r double-base representation 
is equivalent to determining whether certain other related integers have doubly- 
primitive representations of various lengths. In Section 0] we find several moduli 
m that are useful in producing proofs that integers do not have doubly-primitive 
representations of lengths up to 5. Finally, in Section[5]we use the moduli produced 
in Section |4] to prove Theorem II .21 

Our proof of Theorem 11.21 depends on computer calculations. The programs 
we used, some written in Magma [5] and some in C, can be found on the second 
author's web site: start at 

http : //www . alumni . caltech . edu/~however/biblio . html 
and follow the links related to this paper. 

In a recent paper [TJ, Adam, Hajdu, and Luca study the set of integers that can 
be expressed in the form aiSi + • • • + dfcSfc, where k is fixed, the coefficients a\ are 
integers taken from a fixed finite set A, and the Sj are integers that are 5-units 
for some fixed finite set 5 of primes. In the special case where 5 = {2,3} and 
A = {1,-1}, the set they study is exactly the set of integers of span at most k. 
They, like us, use a result of Erdos, Pomerance, and Schmutz [11] to find auxiliary 
moduli Tji for which the image of the set of 5-units in Z/rnZ is small. However, 
their interest lies in computing upper bounds for the density of such sets, while 
ours lies in producing lower bounds on the spans of individual integers — and, of 
course, in computing actual values of s(n) and S(n). 

2. Proof of Theorem 11.11 

For each positive integer m we let T(m) be the image in Z/mZ of the set of 
{2, 3}-integers, and we let t(m) denote the cardinality of T(m). For every r > 2 we 
define the expected degree-r density D r {m) of m to be the smaller of 1 and 

1 ft{m) + r - 1\ 

777 \ r J 

Lemma 2.1. Suppose r > 2 and m is an integer whose expected degree-r density 
is less than 1. Then not every element of Z/mZ can be expressed as a sum of r 
elements ofT(m). 
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Proof. There are (*( m )+ r ~ 1 ) wa y S f choosing r elements from T(m) with repetition, 
so there are at most this many sums of r elements of T(m). If D r (m) is less than 1, 
then the number of such sums is less than m, so some element of Z/mZ is not such 
a sum. □ 



Proof of Theorem Recall that the Carmichael function A is the function that 
assigns to each integer m > 1 the exponent of the multiplicative group (Z/mZ)*. 
Using [2, Prop. 10, p. 201], Erdos, Pomerance, and Schmutz show [TTJ §2] that there 
is a constant d > such that there are infinitely many squarefree m such that 

(2.1) A(m) < (logm) dlogloglogm . 

We will prove Theorem 11.11 with c = 1 / (3d) . 

We note for future reference that the function log x/ (log log a; log log log a;) is 
increasing for x > 12006, and that every integer n < 12006 has a double-base 
representation of length 4 or less (see Section [SJ . 

Let m be one of the infinite number of squarefree integers that satisfy equa- 
tion (|2.1[) and for which we also have 

, / i , clogm _ . 

A(m) > 4 and - — -5- — > 4. 

log log m log log log m 

Since m is squarefree, there are at most A(m) + 1 distinct powers of 2 in Z/mZ and 
at most A(m) + 1 distinct powers of 3 in Z/mZ. It follows that 

t(m) < 2(A(m) + l) 2 < A(m) 3 . 

Let r = [c log mj (log log m log log log m) J, so that r > 4. Then 

D r (m) < t{ni) r jra 

< X(m) 3r /m 

^ e 3rd log log m log log log m J m 

< e los m /™ 
= 1, 

so by Lemma 12.11 there is a nonnegative integer n < m such that the image of n in 
Z/mZ cannot be written as the sum of r elements of T{m). It follows that 

clogm clogn 
s{n) > r + 1 > - — — - — > 



log log m log log log m log log n log log log n ' 

(The final inequality depends on the fact that n > 12006, but we know that n > 
12006 because the span of n is at least r + 1 > 5.) □ 

3. Primitive representations 

Let n = n\ + • • • + n r be a length-r double-base representation of an integer n. 
We say that the representation is primitive if the greatest common divisor of the 
rii is 1; we say that the representation is doubly primitive if one of the rij is not 
divisible by 2 and a different n, is not divisible by 3. Note that a representation 
that is primitive but not doubly primitive must have one summand equal to ±1, 
and all of the other summands must be divisible by 6. 

Lemma 3.1. Let r > 2. An integer n has a double-base representation of length r 
if and only if at least one of the following four statements holds: 
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(1) n has a doubly primitive representation of length r. 

(2) n + 1 is divisible by 6 and (n + l)/6 has a representation of length r — 1. 

(3) n — 1 is divisible by 6 and (n — l)/6 has a representation of length r — 1. 

(4) There is a {2, 3}-integer d > 1 i/ia£ divides n such that n/d has a primitive 
representation of length r. 

Proof. Suppose n has a length-r representation n = n\ + ■ ■ ■ + n r . If the representa- 
tion is doubly primitive, then statement (1) holds. If the representation is primitive 
but not doubly primitive, then either statement (2) or statement (3) holds. If the 
representation is not primitive, then statement (4) holds, where we take d to be the 
greatest common divisor of the Ui . 

The converse is clear. □ 

Remark 3.2. It is easy, of course, to determine whether a positive integer has a 
length- 1 double-base representation. 

By recursion, we see that a proof that an integer n has no length-r representation 
can be constructed from proofs that a number of integers (no larger than n) have no 
doubly primitive representations of certain lengths. Thus, in the following sections 
we will mostly focus on doubly-primitive representations. 



To show that an integer n has no double-base representations of length r, we can 
find a modulus m with D r (m) < 1 and hope that n reduces to one of the elements 
of Z/rnZ that cannot be written as a sum of r elements of T{m). As a practical 
matter, however, it is easier to use Lemma 13.11 to reduce the problem to finding 
proofs that certain integers have no doubly-primitive representations; as we shall 
see, this allows us to use smaller moduli m. 

For each positive integer m, we let T2(m) and T^{m) denote the images in Z/mZ 
of the sets {±2* : i > 0} and {±3* : i > 0}, respectively, and we let tiirn) and t^(m) 
denote the cardinalities of these two sets. We have already defined what a doubly- 
primitive representation of an integer is; now we define a doubly-primitive length-r 
representation of an element n of Z jrriL to be an expression 



where n\ lies in T2(m), ni lies in T^{m), and all ni lie in T(m). For every r > 2 we 
define the expected doubly-primitive degree-r density d r (m) of m to be the smaller 
of 1 and 



We leave the proof of the following lemma to the reader; it is similar to that of 
Lemma 12.11 

Lemma 4.1. Suppose r > 2 and m is an integer whose expected doubly-primitive 
degree-r density is less than 1. Then not every element of Z/toZ has a doubly- 



Suppose we have found an integer m with d r (m) < 1, and suppose we would 
like to prove that an integer n has no doubly-primitive length-r representation by 
showing that its image in Z/mZ has no doubly-primitive length-r representation. 
The next lemma, whose simple proof we omit, suggests an efficient way of checking 
the latter condition. 



4. Low-density moduli 



n = n% + • • • + n. 




primitive length-r representation. 



□ 
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Lemma 4.2. Let m > and r > 2 be integers. Define two subsets Si and S 2 of 
Z/toZ as follows: If r is odd, say r = 2u + 1, take 

51 = {ai + a 2 H h a u+ i : a x G T 2 (to), a 2 € T 3 (m), 

a 3 , . . . ,a„ + i G T(m)}, 

5 2 = Wi + a 2 H 1- a« : ai, . . • , a„ £ T(m)}; 

i/ r is even, saw r = 2m ; <afce 

Si = {ai + a 2 H h a u : «i £ T 2 {m), a 2 , ■ ■ ■ , a u 6 

5*2 = {«i + a 2 H h a u : «i £ TMm), a 2 , . . . , a u 6 T(m)}. 

T/ien an element n o/Z/mZ /ias no doubly-primitive length-r representation if and 
only if the intersection Si n {n — a : a G S 2 } is empty. □ 

The work (and the amount of memory) required to compute the set intersection 
mentioned in the lemma is a nearly linear function of the sum of the sizes of the 
two sets Si and S 2 . We can work out reasonable approximations for the sizes of 
these sets. If r = 2u + 1 is odd, we have 

t(m)+u-2\ t 2 (m)ta(m)t(m) u - 1 



u-1 J (u-l)\ 
t(m) + u — 1\ t(m) u 



u 



#51 < t 2 (m)t 3 (m) 

and 

4S 2 < 

while if r = 2u is even, then 

#5i <t 2 {m) 

and 

#S 2 <t 3 (m)[ 

u — 1 / [u — iy. 

Based on these upper bounds, we approximate #S1 + #S"2 by the function 



t(m)+u-2\ t 2 (m)t{my 



u-1 / 
t(m) + u-2\ t 3 (TO)i(m)"" 1 



w r (to) 



t(m) u ^ 1 

(ut 2 (m)t 3 (m)+t(m)) if r = 2u + 1 is odd, 



(t 2 (m) + t 3 {m))- ^7 it r = 2u is even. 

u — 1)! 



Here is one method of finding values of to with low densities and small work 
estimates. Given integers a, b > 0, we write 2 a — 1 = 3 x u with 3 { u and 3 fc — 1 = 2 v v 
with 2 \ v, and we take to = 2 y 3 x gcd(u, v). Then we compute the sets T 2 (m), 
T 3 (m), and T{m), and compute d r (m) and w r (m) for the desired value of r. In 
Table Q] we list several useful values of to that we obtained in this way, together 
with their densities and work factors for r = 2,3, 4, and 5. 
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Table 1. Expected doubly-primitive degree-r densities d r {m) and 
work factors w r (m) for r = 2, 3, 4, 5 and several values of to. 



a 


b 


to 


log d 2 


logd 3 


log d 4 


log d 5 


log w 2 


log w 3 


log lt>4 


log w 5 


144 


432 


1811941545963463911360 


-36.48 


-24.70 


-13.61 


-2.93 


7.06 


12.88 


18.84 


24.47 


288 


144 


7409469211410651840 


-31.39 


-20.02 


-9.35 


0.0 


6.78 


12.47 


18.15 




144 


144 


38391032183474880 


-26.80 


-16.11 


-6.10 


0.0 


6.39 


11.79 


17.08 




72 


216 


952177069640160 


-23.37 


-13.61 


-4.55 


0.0 


6.38 


11.35 


16.14 




144 


48 


54610287600960 


-21.30 


-11.67 


-2.72 


0.0 


6.00 


10.73 


15.63 




36 


108 


1099511627760 


-17.94 


-8.85 


-0.45 


0.0 


5.71 


10.19 


14.80 





5. Proof of Theorem 11.21 

Using the values of m given in Table [IJ it is a simple matter to use Lemmas 13.11 
and !4.2l to construct proofs that certain integers have spans greater than 2, 3, and 4. 
Magma code for doing this can be found in the file DoubleBase .magma, available at 
the URL mentioned in the introduction. The file also contains Magma code that 
verifies that every positive integer less than 103 has span at most 2, that every 
positive integer less than 4985 has span at most 3, and that every positive integer 
less than 641687 has span at most 4. Together, these programs confirm the values 
for 5(3), 5(4), and 5(5) given in Theorem O 

The proof that 5(6) = 326552783 also depends on machine computation, but 
the work involved is large enough that we move from Magma to C. 

For the rest of this section, we set 

n = 326552783, 

to = 1811941545963463911360, 
m = 4441033200890842920= m/408. 

Let T be the set of all {2, 3}-integers, and let T 2 and T 3 be the subsets of T consisting 
of the elements whose only prime divisors are 2 and 3, respectively. We set 

P = {r + s:r,s€T}, 

5 = {r + s + t : r E T 2 , s e T 3 ,t € T}. 

Any number that can be written as the difference of an element of P and an element 
of 5 has span at most 5. The program SumOf 5 . c, available at the URL mentioned in 
the introduction, shows that every positive integer less than n is contained in P — 5. 
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(In fact, the program only looks at elements of P and S that have absolute value 
at most 2n and that are obtained from summands of absolute value at most 2 61 .) 

To show that n cannot be written as the sum of five {2, 3}-integers, we use Lem- 
mas [3J] and |4]2j The programs found in DoubleBase .magma can carry out all the 
necessary computations, except for the largest one: showing that n has no doubly- 
primitive representations of length 5. To carry out this step of the proof, we would 
like to show that the image of n in Z/mZ has no doubly-primitive representations 
of length 5. This is a slightly awkward computation on current desktop computers, 
because the modulus m does not fit into a 64-bit word. Instead, we find all doubly- 
primitive length-5 representations of the image of n in Z/moZ. This computation 
is done by the program Check5 . c. Then we take the resulting list of mod-mo rep- 
resentations and use the Magma program found in the file Che ck5. magma to see 
whether any of them can be lifted up to a mod-m representation. We find that 
none of the mod-mo representations can be lifted to a mod-m representation, so n 
has no doubly-primitive representations of length 5. 
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